-
Title
Testing and Applying LDAP Labels -
Description
Some customers report that LDAP label filters will return the expected results in a test, but the label does not apply properly. -
Resolution
The resolution is to use a KACE Variable in the filter after testing. The KACE variable is needed for application purposes (to apply the label to the correct filter), but will not return any results in a test.
When testing the creation of a filter, an asterisk (*) should be used in place of the KACE Variable.
Search Filter examples for testing:
(&(samaccountname=*)(objectClass=user))
or
(&(samaccountname=*)(memberOf=CN=Support,OU=Dept,DC=Kace,DC=com))
Once tested and confirmed to target the intended group, it will be necessary to change the asterisk (*) to the proper KACE Variable. For a list of KACE Variables, please see the article LDAP Filters Tips and Tricks.
Search Filter examples for application:
(&(samaccountname=KBOX_USER_NAME)(objectClass=user))
or
(&(samaccountname=KBOX_USER_NAME)(memberOf=CN=Support,OU=Dept,DC=Kace,DC=com))